478 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	96266b9371	Resume user-engine integration rollout	2026-08-13 14:56:53 +02:00
tegwick	20d4d8af04	Allow user-engine egress to email-connect; record T04 hand-back. ... NetworkPolicy egress to email-connect:8080 for transactional invitation send; NK-WP-0024 note points at EMAIL-WP-0004 failure evidence.	2026-08-12 13:32:11 +02:00
custodian-sync	ea6cc01872	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-12: - update .custodian-brief.md for net-kingdom	2026-08-12 13:25:55 +02:00
custodian-sync	586ef5c282	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-11: - update .custodian-brief.md for net-kingdom	2026-08-11 14:47:42 +02:00
tegwick	1bb7bce99b	ADR-0015: NetKingdom Railiance packaging and relational platform ... Settles two questions raised by bringing NetKingdom under Railiance governance: 1. Separate rapp-* repos per engine (rapp-tenant-engine, rapp-user-engine), following repository-axes.md's one-workload rule. The decisive property is independent rollback -- a single rapp would need one rollback contract across independently versioned services. secrets-engine is not packaged as a rapp: it has no deployed workload. 2. CloudNative PG via rapp-postgres is the default relational platform for production. Per-workload SQLite-on-a-PVC is dev/test only, and rail-kubernetes wave-1 does not support the persistent-storage contract it depends on. tenant-engine migrates; its TenantStore Protocol makes this a backend swap behind an existing seam. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-11 14:46:33 +02:00
tegwick	4511a43f7a	Wire user-engine authorization runtime	2026-08-10 19:15:18 +02:00
tegwick	dfdd3163b7	Deploy registration-aware identity provisioner	2026-08-10 15:49:34 +02:00
tegwick	0be8a03b99	Honor validated registration usernames	2026-08-10 13:23:45 +02:00
tegwick	83508915db	Register app.coulomb.social OIDC redirect for coulomb-social ... Parallel public host while apex stays Bubble; keep apex redirect for later.	2026-08-09 23:20:30 +02:00
tegwick	0e3a24d888	Deploy KeyCape client MFA override for coulomb-social ... Register coulomb-social with mfaRequired: false, roll key-cape image that honors client policy, and track NK-WP-0025 public registration orchestration.	2026-08-09 22:42:51 +02:00
custodian-sync	74faee98c4	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-09: - update .custodian-brief.md for net-kingdom	2026-08-09 22:27:37 +02:00
custodian-sync	ceb7da2d9d	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-09: - update .custodian-brief.md for net-kingdom	2026-08-09 21:58:30 +02:00
custodian-sync	566fef39d6	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-09: - update .custodian-brief.md for net-kingdom	2026-08-09 20:56:17 +02:00
tegwick	0165ac8d14	Deploy user-engine flex-auth policy service	2026-08-09 02:21:41 +02:00
tegwick	29ae3e70c6	Activate expanded portal integration gate	2026-08-09 02:00:58 +02:00
tegwick	27656916db	Add KeyCape client registration for coulomb.social ... Idempotent patch of sso/keycape-config with public PKCE client and redirect URIs for local :8008 and production coulomb.social callbacks.	2026-08-09 01:50:52 +02:00
tegwick	62b1ea3d59	Deploy tenant authority for user portal	2026-08-09 01:39:57 +02:00
custodian-sync	c4de9bab0a	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-08: - update .custodian-brief.md for net-kingdom	2026-08-08 23:22:10 +02:00
tegwick	03cc0c5a91	Deploy expanded user-engine portal	2026-08-08 23:18:29 +02:00
tegwick	0ec6f8c75d	Move identity secret stores to local OpenBao	2026-08-03 21:37:17 +02:00
tegwick	d975086ef0	Complete reversible identity retirement	2026-07-30 09:28:05 +02:00
custodian-sync	91a1acad8c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-30: - update .custodian-brief.md for net-kingdom	2026-07-30 09:23:27 +02:00
tegwick	5959fc0537	Close portal integration MVP and narrow identity cutover	2026-07-30 00:52:52 +02:00
custodian-sync	888e5c491f	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-30: - update .custodian-brief.md for net-kingdom	2026-07-30 00:51:49 +02:00
tegwick	39b71d6d96	Complete user-engine runtime custody	2026-07-30 00:40:43 +02:00
custodian-sync	a0bfb9c597	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-30: - update .custodian-brief.md for net-kingdom	2026-07-30 00:38:21 +02:00
tegwick	f854969a01	Move portal workloads to registry digests	2026-07-30 00:25:16 +02:00
tegwick	52b57c99f7	Add user-engine backup and rollback verification	2026-07-30 00:00:14 +02:00
tegwick	92ae9103c7	Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) ... Maintainer decision, 2026-07-29: adopts TRSL V1C1 as this repo's preliminary governing license, per target-revenue's workplans/TREV-WP-0008-governance-and-pilot-rollout.md T05. Full specialist legal review is deferred until out of beta (target-revenue SCOPE.md §1). No Phase is yet declared for this repo. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-29 23:43:45 +02:00
tegwick	12ac63f32c	Deploy identity drift reconciliation	2026-07-29 23:41:42 +02:00
custodian-sync	1d24d671bc	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-29: - update .custodian-brief.md for net-kingdom	2026-07-29 23:39:42 +02:00
tegwick	12cdef5c7c	Make identity deletion replay safe	2026-07-29 23:34:46 +02:00
tegwick	26d0e52172	Add identity drift reconciliation	2026-07-29 23:29:36 +02:00
tegwick	487012e961	Complete identity seams and email login	2026-07-29 23:14:09 +02:00
custodian-sync	7659397574	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-29: - update .custodian-brief.md for net-kingdom	2026-07-29 23:09:59 +02:00
custodian-sync	4318e1a02f	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-29: - update .custodian-brief.md for net-kingdom	2026-07-29 22:16:01 +02:00
tegwick	6aadcd2a1a	Complete Binky and identity conformance gates	2026-07-29 22:14:19 +02:00
tegwick	7171587611	Label authenticator entries by user and realm	2026-07-29 22:05:08 +02:00
tegwick	00d3a9b508	Record OIDC network policy correction	2026-07-29 21:41:20 +02:00
tegwick	8e7229ae68	Allow user-engine OIDC exchange with KeyCape	2026-07-29 21:40:52 +02:00
tegwick	3710894120	Record platform-root claim correction	2026-07-29 21:33:31 +02:00
tegwick	2fdf21c379	Deploy platform-root claim mapping	2026-07-29 21:31:54 +02:00
tegwick	8905c4f493	Record password setup conformance	2026-07-28 17:55:39 +02:00
tegwick	d2c59fbf5e	Keep provisioner DNS egress in network policy	2026-07-28 17:51:13 +02:00
tegwick	816c5c3773	Deploy reusable password setup handoff	2026-07-28 17:45:09 +02:00
tegwick	80adc31c7c	Pin password helper image digest	2026-07-28 17:38:32 +02:00
tegwick	76270a239e	Add single-use identity password setup	2026-07-28 17:30:23 +02:00
tegwick	a58df4c3e6	Advance pre-cutover identity conformance	2026-07-28 16:48:47 +02:00
custodian-sync	c639306c53	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-28: - update .custodian-brief.md for net-kingdom	2026-07-28 16:47:43 +02:00
tegwick	43045cbaf5	Verify railiance01 identity dependencies	2026-07-28 12:59:12 +02:00